CVE-2026-29786 node-tar: Hardlink Path Traversal via Drive-Relative Linkpath
Published March 11, 2026
Information published.
Microsoft Security Response Center Blog Alerts
CVE-2026-3731 libssh SFTP Extension Name sftp.c sftp_extensions_get_data out-of-bounds
Published March 11, 2026
Information published.
CVE-2024-14027 xattr: switch to CLASS(fd)
Published March 11, 2026
Information published.
CVE-2026-27139 FileInfo can escape from a Root in os
Published March 11, 2026
Information published.
CVE-2026-26018 CoreDNS Loop Detection Denial of Service Vulnerability
Published March 11, 2026
Information published.
CVE-2026-26017 CoreDNS ACL Bypass
Published March 11, 2026
Information published.
CVE-2026-26127 .NET Denial of Service Vulnerability
Published March 11, 2026
Out-of-bounds read in .NET allows an unauthorized attacker to deny service over a network.
CVE-2025-69645 Binutils objdump contains a denial-of-service vulnerability when processing a crafted binary with malformed DWARF debug information. A logic error in the handling of DWARF compilation units can result in an invalid offset_size value being used inside byte_get_little_endian, leading to an abort (SIGABRT). The issue was observed in binutils 2.44. A local attacker can trigger the crash by supplying a malicious input file.
Published March 11, 2026
Information published.
CVE-2025-69652 GNU Binutils thru 2.46 readelf contains a vulnerability that leads to an abort (SIGABRT) when processing a crafted ELF binary with malformed DWARF abbrev or debug information. Due to incomplete state cleanup in process_debug_info(), an invalid debug_info_p state may propagate into DWARF attribute parsing routines. When certain malformed attributes result in an unexpected data length of zero, byte_get_little_endian() triggers a fatal abort. No evidence of memory corruption or code execution was observed; the impact is limited to denial of service.
Published March 11, 2026
Information published.
CVE-2025-69650 GNU Binutils thru 2.46 readelf contains a double free vulnerability when processing a crafted ELF binary with malformed relocation data. During GOT relocation handling, dump_relocations may return early without initializing the all_relocations array. As a result, process_got_section_contents() may pass an uninitialized r_symbol pointer to free(), leading to a double free and terminating the program with SIGABRT. No evidence of exploitable memory corruption or code execution was observed; the impact is limited to denial of service.
Published March 11, 2026
Information published.
